Which of the following is an example of a corrective control?

The correct answer is C. Privileged access to critical information systems requiring a second factor of authentication using. Corrective controls remediate or reduce the impact of an identified weakness or risk. Requiring a second factor of authentication (MFA) for privileged access is classified as corrective because it was implemented to correct the known weakness of relying solely on passwords for…

Cloud Security Auditing

Question

Options

AA central anti-virus system installing the latest signature files before allowing a connection to the
BUnsuccessful access attempts being automatically logged for investigation
CPrivileged access to critical information systems requiring a second factor of authentication using
DAll new employees having standard access rights until their manager approves privileged rights

How the community answered

(38 responses)

A
13% (5)
B
3% (1)
C
76% (29)
D
8% (3)

Explanation

Corrective controls remediate or reduce the impact of an identified weakness or risk. Requiring a second factor of authentication (MFA) for privileged access is classified as corrective because it was implemented to correct the known weakness of relying solely on passwords for high-risk access. Option A (installing AV signatures before allowing a connection) is preventive. Option B (logging failed attempts) is detective. Option D (default access until approved) is preventive. MFA on privileged accounts directly addresses and corrects a control gap in the authentication mechanism.

Topics

#Corrective Controls#Access Control#Authentication#Control Types

Community Discussion

No community discussion yet for this question.

Full CCAK Practice